FG 50E v6.2.12 Download Speed much lower than upload

[rafal0001]

Hi All,

I have a strange problem with our Fortigate 50E. The router works with a fiber connection, wan interface configured as a VLAN,  PPPoE.

Router worked properly about 4 years, including one year with fiber. The max speed was 300Mbps / 70 Mbps (DL/UL)

Two months ago I noticed that DL speed decreased to 30Mbps, now its only about 4Mbps

I've checked cables, I also connected router of ISP (when ISP's router was connected the speed returned to 300/70)

Is there something that shoud I check with my FG50?

regards,

[DejanMaric]

Hi!

Try an iperf speedtest over the CLI:

diag traffictest server-intf wan1
diag traffictest client-intf wan1
diag traffictest port 9211
diag traffictest run -R -c 178.215.228.109

Maybe you need to change the interface to wan2 or any other interface you use as your wan interface. You can also use any other public iperf server and his port. 

BR 

[rafal0001]

I got such a response:

PL-ROF-FG50E # diagnose traffictest server-intf wanx
server-intf:	wan2
PL-ROF-FG50E # diag traffictest client-intf wanx
client-intf:	wan2
PL-ROF-FG50E # diag traffictest port 9211
port:	9211
PL-ROF-FG50E # diagnose traffictest run -R -c 178.215.228.109

Can not find ip (wan2)
Command fail. Return code -1

[DejanMaric]

You wrote "diag traffictest server-intf wanx"so the FGT took wan2 try it with wan1 please.

[pjawalekar]

Hi rafal0001, 

Please validate if you using any traffic shaper which can limit the speed for the users. Also you can validate what is the overall bandwidth utilization on wan/isp link when you are facing the issue, as when you connect direct pc to ISP router only single user traffic will be there. And when connected behind fortigate multiple users can utilize the link.
Also you can validate the speed and duplex settings on the wan interface which is connected to the isp router. Also check if there are any drops/error at the interface level. 
fnsysctl ifconfig interface-name   -----> to check if there are any drops on FIrtigate interface
get hardware nic port1  -----> To check duplex settings

You can refer to below KB regarding Low-throughput-troubleshooting
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Low-throughput-troubleshooting/ta-p/217967

Regard's,

Pratik

[rafal0001]

Please validate if you using any traffic shaper which can limit the speed for the users.

How to do it?

Also you can validate what is the overall bandwidth utilization on wan/isp link when you are facing the issue, as when you connect direct pc to ISP router only single user traffic will be there. And when connected behind fortigate multiple users can utilize the link.
Also you can validate the speed and duplex settings on the wan interface which is connected to the isp router.

I connected only one PC to the LAN side, the effect is the same: 4M (DL) 60M (UL)

Also check if there are any drops/error at the interface level.

PL-ROF-FG50E # fnsysctl ifconfig wan2
wan2	Link encap:Ethernet  HWaddr 90:6C:AC:ED:FA:88
	UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
	RX packets:304659612 errors:0 dropped:0 overruns:0 frame:0
	TX packets:157165022 errors:0 dropped:0 overruns:0 carrier:0
	collisions:0 txqueuelen:532 
	RX bytes:370622720258 (345.2 GB)  TX bytes:42500476344 (39.6 GB)
	Interrupt:195 

PL-ROF-FG50E # get hardware nic wan2
Description		Marvell NETA Gigabit Ethernet driver 00000010       
System_Device_Name	wan2             
Current_HWaddr		90:6c:ac:ed:fa:88                                    
Permanent_HWaddr	90:6c:ac:ed:fa:88                                   
State			up                                                           
Link			up                                                            
Speed			1000                                                         
Duplex			full                                                        
Rx_Packets		304726238                                                
Tx_Packets		157226047                                                
Rx_Bytes		1326958656                                                 
Tx_Bytes		3884233739                                                 

[rafal0001]

I believe my device is broken.

Disconnected from main location, I reset it to factory settings and made a nat between two private subnets. Then I tried to download a large file from subnet behind nat (both sides 1Gbps)

The transfer was 700kB/s max and fluctuated to zero.

What do you think?

Regards

Rafal

[mle2802]

Hi Rafal,

Could you please verify the part number of this unit by the following command "get sys status".

Regards.

[SupportSTR]

You can repair it, just heat the CPU with a hot air gun which will resolder the solders under the CPU. The problem comes from the ball solders under the CPU which degrade over time, you just have to melt them for a few seconds for the FG50E LAN ports to work again :

FG50E CPU

See more here : https://community.fortinet.com/t5/Support-Forum/Fortigate-50E-Dying-Packet-loss-and-lan-ports-stop-f...